$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/82a39aa4-a04f-3930-8f25-5b23b167307b.roa File: 82a39aa4-a04f-3930-8f25-5b23b167307b.roa (raw, json) Hash identifier: iINZq5SOFJtoJKTQrTXqEqSyfvgvSTD9APuQZsC64F8= Subject key identifier: DD:20:C1:BE:8E:7B:8F:1F:3F:8E:35:28:CE:D8:B8:24:67:FB:69:55 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B66AD3C20C281219D866EC400 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/82a39aa4-a04f-3930-8f25-5b23b167307b.roa Signing time: Fri 03 Oct 2025 17:09:12 +0000 ROA not before: Fri 03 Oct 2025 17:09:12 +0000 ROA not after: Thu 01 Jan 2026 18:09:12 +0000 asID: 23473 IP address blocks: 153.33.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:ad:3c:20:c2:81:21:9d:86:6e:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 3 17:09:12 2025 GMT Not After : Jan 1 18:09:12 2026 GMT Subject: CN=6edded0b-a513-4c3a-9cc3-78bff97b8648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ec:60:d8:1f:cf:70:6f:41:ce:99:9b:9b:e0: 12:6e:ec:94:c9:ef:30:c9:8d:c5:6d:f1:05:a5:17: b4:97:10:13:57:c0:54:b1:6d:8a:96:b6:9d:26:79: 9e:83:2b:79:9c:ce:07:d0:73:cc:7e:a8:ef:f1:aa: 45:81:e0:db:d2:80:5a:85:4d:67:cd:3a:26:52:77: 02:ef:2c:95:f9:79:71:8f:10:d5:bc:12:ae:21:30: 24:01:0f:a3:ab:19:be:97:1d:a7:e6:4a:b4:45:f1: 37:c7:6d:36:8d:0b:38:33:dc:b9:16:1c:6c:70:7d: cb:e4:fd:8a:e9:5a:26:d5:0a:9b:0b:34:5c:4a:e8: f7:13:0b:e5:5d:06:6f:ac:93:5d:e1:2a:48:a6:2c: aa:0c:52:65:2e:17:f2:22:df:1c:61:2f:55:cd:48: 18:05:fe:fd:fc:bf:22:a6:56:d3:34:17:62:50:a8: fb:9b:f2:57:11:8f:3a:75:27:45:8d:c3:3f:fb:37: 05:7a:59:fb:a6:6b:f9:50:6b:1a:95:93:0c:e7:f9: 38:08:74:31:1d:62:34:6c:9a:58:bd:37:f1:76:6d: a8:a5:cc:44:7d:ab:40:b1:1e:b6:0b:22:85:0d:c3: 70:4a:50:6c:a1:d6:08:b9:47:0f:e5:79:9a:5e:dd: a0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:20:C1:BE:8E:7B:8F:1F:3F:8E:35:28:CE:D8:B8:24:67:FB:69:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/82a39aa4-a04f-3930-8f25-5b23b167307b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:72:d1:f4:ad:e1:1d:04:1b:1d:e7:af:73:b5:fc:f6:33:26: cb:dd:f8:0a:1d:a6:23:66:08:94:5c:46:c1:5f:87:2b:bc:5e: 1c:35:ba:25:5b:ae:1e:d8:ed:eb:99:47:db:2a:69:6a:d7:3f: 40:c7:99:00:ef:2b:6f:f1:cf:a5:ce:a9:7c:21:7a:c4:b5:e5: 4c:5c:8f:6d:b9:10:96:48:15:a9:fa:57:22:ff:66:fc:e0:d9: 4c:f3:b1:51:5c:f4:b1:39:bb:ae:08:af:6f:82:a2:1a:28:15: 92:7a:99:94:35:ea:d2:40:60:77:53:5b:d1:6a:91:1d:21:73: 86:77:96:15:ab:fc:67:c2:32:99:cd:7f:92:fc:41:d9:a6:04: 05:2d:c1:d0:ae:98:53:e9:3d:0c:cd:24:b9:fe:42:ae:57:78: 02:40:f8:d4:0f:d7:76:82:e3:a1:ab:3a:a7:a9:47:3f:59:75: f6:7f:45:f4:69:72:f7:2e:ef:6f:14:57:53:28:43:48:a5:99: 63:45:2e:54:cc:34:40:bb:27:39:c1:49:cf:98:aa:c9:87:27: 78:1c:4e:f1:90:0b:a5:00:52:81:38:c2:c8:b1:46:71:e5:71: e4:6c:ec:80:56:03:0c:c3:5c:78:9f:ee:4b:87:3a:c6:79:c2: 6d:a0:c7:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmrTwgwoEhnYZuxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAwMzE3MDkxMloXDTI2MDEwMTE4MDkxMlowLzEtMCsGA1UEAxMk NmVkZGVkMGItYTUxMy00YzNhLTljYzMtNzhiZmY5N2I4NjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOxg2B/PcG9Bzpmbm+ASbuyUye8wyY3FbfEF pRe0lxATV8BUsW2KlradJnmegyt5nM4H0HPMfqjv8apFgeDb0oBahU1nzTomUncC 7yyV+XlxjxDVvBKuITAkAQ+jqxm+lx2n5kq0RfE3x202jQs4M9y5FhxscH3L5P2K 6Vom1QqbCzRcSuj3EwvlXQZvrJNd4SpIpiyqDFJlLhfyIt8cYS9VzUgYBf79/L8i plbTNBdiUKj7m/JXEY86dSdFjcM/+zcFeln7pmv5UGsalZMM5/k4CHQxHWI0bJpY vTfxdm2opcxEfatAsR62CyKFDcNwSlBsodYIuUcP5XmaXt2gPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0gwb6Oe48fP441KM7YuCRn+2lVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvODJhMzlhYTQtYTA0Zi0z OTMwLThmMjUtNWIyM2IxNjczMDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSERMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRy0fSt4R0EGx3nr3O1/PYzJsvd+AodpiNmCJRcRsFfhyu8Xhw1uiVb rh7Y7euZR9sqaWrXP0DHmQDvK2/xz6XOqXwhesS15Uxcj225EJZIFan6VyL/Zvzg 2UzzsVFc9LE5u64Ir2+CohooFZJ6mZQ16tJAYHdTW9FqkR0hc4Z3lhWr/GfCMpnN f5L8QdmmBAUtwdCumFPpPQzNJLn+Qq5XeAJA+NQP13aC46GrOqepRz9ZdfZ/RfRp cvcu728UV1MoQ0ilmWNFLlTMNEC7JznBSc+YqsmHJ3gcTvGQC6UAUoE4wsixRnHl ceRs7IBWAwzDXHif7kuHOsZ5wm2gx4k= -----END CERTIFICATE-----Generated at Fri Oct 10 03:49:25 2025 by rpki-client